From: Persio Pucci (persiopucci@uol.com.br)
Date: Mon Sep 30 2002 - 10:01:16 GMT-3
Guys,
let me ask you one thing about PPP CHAP passwords, once you are already in
the topic... last week, I was doing some lab pratices and I had to config a
line backup, where it had PPP encaps and needed CHAP auth, just like Soile's
Skynet... I configured both ends wit the same password (plain, no encryp)
with the users using the opposite router's hostname, as it is supposed to
be.
Anyway, when I tried to switch to this backup link, it did not work, I got
the "MD compare failed" message. I went through both configs, the usernames
where right, and the passwords did match, but it would just not work.
After a while, I copied and pasted the very same user configuration on each
router, and voila, it worked right away, and the interface went up.
Can somebody explain why it did not work on first try, but when I applied
that again it worked fine?
Persio
----- Original Message -----
From: "Gregory W. Posey Jr." <gposey@uaes.org>
To: "'Michael Snyder'" <msnyder@revolutioncomputer.com>; "'Jaksec Nick'"
<Nick.Jaksec@acs-inc.com>
Cc: <ccielab@groupstudy.com>
Sent: Monday, September 30, 2002 9:17 AM
Subject: RE: PPP CHAP Password
> Actually, it's not about transposing passwords. Without using ppp chap
> hostname command, the router defaults to using its own hostname and the
> configured password.
>
> So your example below works as long as the passwords match...
>
> Router1(config)# username router2 password cisco
> Router2(config)# username router1 password cisco
>
> The routers don't need to have a username & password entry for its own
> hostname (e.g. Router1(config)# username router1 password cisco).
>
> As for the original question, does the remote router have the username &
> password pair that is configured as the ppp chap hostname & password
> under the interface in the "host" end router?
>
> Thank you,
> Greg Posey Jr.
> CCIE #7981
> CSS1, CCSE
> CCNP - Voice Access
> M.S. EE
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Michael Snyder
> Sent: Wednesday, September 25, 2002 10:05 AM
> To: 'Jaksec, Nick'
> Cc: ccielab@groupstudy.com
> Subject: RE: PPP CHAP Password
>
> I don't know why this works, but I do know it does work as listed below.
>
> With CHAP.
>
> Router 1
> User router1 pass 0 pass1
> User router2 pass 0 pass2
>
> Router 2
> User router1 pass 0 pass2
> User router2 pass 0 pass1
>
> Basically your transpose the passwords on one of the routers.
>
> With PAP.
>
> Router 1
> User router1 pass 0 pass1
> User router2 pass 0 pass2
>
> Router 2
> User router1 pass 0 pass1
> User router2 pass 0 pass2
>
> You don't transpose the passwords with pap, just a one to one
> relationship.
>
>
> Also I always use a ppp alternative host name command, so I don't have
> to worry about the router's name. Basically, I cut and paste the above
> to the routers, name them router1 and router2 using the ppp alternative
> host name command and it works.
>
>
>
>
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Jaksec, Nick
> Sent: Tuesday, September 24, 2002 1:00 PM
> To: ccielab@groupstudy.com
> Subject: PPP CHAP Password
>
> When setting the hostname and password under the BRI interface (PPP CHAP
> Hostname & PPP CHAP Password) it does not authenticate to the neighbor
> router. I am placing the username and password on the remote router to
> the
> hostname and password correctly but it will not accept the new password.
> Does anybody have any suggustions ??
This archive was generated by hypermail 2.1.4 : Mon Oct 07 2002 - 07:44:07 GMT-3